Grant kernel_t necessary permissions for loopback mounts

For loopback mounts to work, the kernel requires access permissions to fd's passed in by mount and to the source files (labeled mount_loopback_t).
2014-02-01 14:50:24 +01:00 · 2014-02-01 14:50:24 +01:00 · 7ac64b8a5a
parent 24be4c0096
commit 7ac64b8a5a
1 changed files with 3 additions and 0 deletions
--- a/policy/modules/kernel/kernel.te
+++ b/policy/modules/kernel/kernel.te
@ -287,6 +287,9 @@ files_list_etc(kernel_t)
 files_list_home(kernel_t)
 files_read_usr_files(kernel_t)

+mount_use_fds(kernel_t)
+mount_read_mount_loopback(kernel_t)
+
 mcs_process_set_categories(kernel_t)

 mls_process_read_up(kernel_t)